Repository navigation
docs: say which Pro token controls hide when API tokens are off - #16565
Merged
Merged
Conversation
The API v2 Token page re-reads the key when its tab comes back into view. With DD_API_TOKENS_ENABLED=False, Pro hides API v2 Token, Force Token Reset, bulk Reset API Tokens and the MCP token prompt; with only DD_API_TOKEN_AUTH_ENDPOINT_ENABLED=False the token page leaves out the api-token-auth instructions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Maffooch
approved these changes
Oct 27, 2026
devGregA
approved these changes
Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Docs for a DefectDojo Pro change to the API token controls.
automation/api/api-v2-docs.md: the Pro API v2 Token page reads the key again when its tab comes back into view, and shows an API Key Changed notice when the key was replaced in another tab or by an administrator. The sentence saying the page shows the reason when tokens are disabled is replaced by what Pro now does: withDD_API_TOKENS_ENABLED=Falseit hides API v2 Token in the account menu (an old link shows Not Found), Force Token Reset, the bulk Reset API Tokens action and the API Access walkthrough, and the MCP Service page says an AI provider cannot connect. With onlyDD_API_TOKEN_AUTH_ENDPOINT_ENABLED=False, the token page leaves out the instructions for that endpoint.admin/user_management/PRO__resetting_user_credentials.md: Reset API Tokens and Force Token Reset are offered only while API tokens are enabled.navigation/PRO__sidebar.md: the account menu lists API v2 Token when API tokens are enabled.metrics_reports/ai/mcp_server_pro.md: the MCP Server prerequisites note that an instance with API tokens disabled cannot be reached through it.English pages only; the language copies are translated automatically.
Test results
Docs only. Each statement was checked against the Pro change in a browser, with API tokens on, with a restart under
DD_API_TOKENS_ENABLED=False, and with the api-token-auth endpoint off.Documentation
This PR is the documentation change.